Legal
California Consumer Privacy Act (CCPA) Rights
Effective January 29, 2026
This notice supplements our Privacy Policy and applies to consumers residing in California.
1. Your CCPA Rights
The California Consumer Privacy Act (CCPA) and its successor, the California Privacy Rights Act (CPRA), grant California residents specific rights regarding their personal information:
Right to Know
You have the right to request what personal information we collect, use, share, and sell about you. We will provide this information in a portable format within 45 days of verification.
Right to Delete
You can request that we delete personal information we have collected from you, subject to certain exceptions (e.g., information necessary for billing, fraud prevention, or legal compliance).
Right to Opt-Out of Sale/Sharing
You have the right to opt-out of the sale or sharing of your personal information for targeted advertising. We do not currently sell or share personal information for these purposes.
Right to Correct
You can request correction of inaccurate personal information we maintain about you. We will correct information within 45 days of verification.
Right to Limit Use
You can request that we limit our use and disclosure of sensitive personal information to purposes necessary to provide services or as otherwise permitted by CCPA.
Right to Non-Discrimination
We will not discriminate against you for exercising your CCPA rights. We will not deny, charge different prices, or provide different quality of service based on your exercise of CCPA rights.
2. How to Submit a CCPA Request
To submit a request to exercise your CCPA rights, contact us using one of the following methods:
Email: [email protected]
Mailing Address: NectorPay Privacy Team, [Address] (contact privacy team for current address)
Response Time: We will respond to your request within 45 days of receipt. If we need more time, we will notify you of the reason and extension period (up to 90 days total).
3. Verification Process
To verify your identity and process your request, we will:
- Ask you to confirm the email address associated with your account
- Request authentication credentials for your account
- Use additional verification methods for sensitive requests (e.g., right to delete)
- For authorized agents: verify written permission from the consumer
4. Categories of Personal Information Collected
We collect the following categories of personal information from California residents:
Identifiers
Name, email, phone, IP address, account ID
Commercial Information
Payment history, subscription details, transaction records
Financial Information
Bank account details (encrypted), tax IDs (encrypted), payment methods
Internet Activity
Usage logs, feature interactions, session data, cookies
Location Information
Inferred from IP address and business address
Sensitive Personal Information
Social Security Numbers, Tax IDs, Bank Account Numbers (all encrypted at rest)
5. Sensitive Personal Information Protection
NectorPay takes special precautions to protect sensitive personal information:
Social Security Numbers
Encrypted at rest (AES-256-GCM)
Tax Identification Numbers
Encrypted at rest (AES-256-GCM)
Bank Account Numbers
Encrypted at rest (AES-256-GCM)
Financial Information
Encrypted in transit (TLS 1.3) and securely stored
All sensitive data is encrypted using AES-256-GCM at rest and transmitted over TLS 1.3 connections. Only authorized personnel with proper security clearance can access decryption keys.
6. Business Purposes for Collection
We collect personal information for the following business purposes:
- •Providing and maintaining the NectorPay platform
- •Managing payment workflows and contractor disbursement data
- •Fulfilling your requests and communicating with you
- •Improving, maintaining, and debugging our services
- •Preventing fraud and ensuring security
- •Complying with legal obligations
- •Understanding usage patterns to guide product improvements
7. No Sale of Personal Information
NectorPay does not sell or share personal information of California residents for targeted advertising purposes. We also do not sell or share the personal information of minors (individuals under 16 years of age).
8. Data Retention
We retain personal information for as long as necessary to provide services, comply with legal obligations, and resolve disputes. Specific retention periods:
- Account information: Retained until account deletion or 7 years after account closure
- Payment records: Retained for 7 years (tax and compliance requirements)
- Audit logs: Retained for 2 years minimum for security and compliance
- Marketing communications: Until you unsubscribe or withdraw consent
9. Authorized Agents
If you would like to use an authorized agent to submit a CCPA request on your behalf, they must:
- Provide written authorization from you
- Provide their own identity verification information
- For requests to delete: Provide consumer-signed declaration under penalty of perjury
We may require the agent to confirm they have authority to act on your behalf before processing sensitive requests.
10. Appeal Rights
If we deny your CCPA request, we will provide you with a detailed explanation. You have the right to appeal our decision by contacting [email protected] with "APPEAL" in the subject line within 45 days of receiving our denial. We will respond to appeals within 45 days.
11. Nevada Privacy Rights
Nevada residents have the right to opt-out of the sale of covered information. NectorPay does not currently sell covered information as defined by Nevada law. If you have questions about our practices, contact [email protected].
Questions or Concerns?
If you have any questions about this CCPA notice or our privacy practices, please contact us at [email protected]. Our privacy team will respond within 5 business days.